Setting up RADIUS services on a Cisco 1921 and Windows Server 2003

I'm new to Cisco routers and to RADIUS services. I have no idea what I'm supposed to do. I've installed the Internet Authentication Service on the server but that's as far as I've got. I have no idea how to configure IAS on the Windows Server and no idea how to configure the Cisco router to use it when it is configured. Can anyone offer any help?
LVL 21
Russ SuterAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
Marius GunnerudSenior Systems EngineerCommented:
For the windows server 2003 configuration have a look at this link:
http://technet.microsoft.com/en-us/library/cc787275(WS.10).aspx

on the cisco device you would need to use AAA, I am assuming you are using telnet for this example:

enable
configure terminal


aaa new-model
aaa authentication default none
(if you have not configured passwords for the console line or any other line for that matter, the cisco device will create a random password and once you log out you will be locked out.)

aaa authentication login RADIUS group radius local-case (This will assign the group NAMED RADIUS to use the radius server and if you lock youself out some how, you can fall back to the locally stored username and password on the cisco device. If you do not want to configure the "fall back" just remove the local-case at the end of the command)

radius-server host x.x.x.x (where x.x.x.x is the ip address of the radius server)

line vty 0 4
login authentication RADIUS
( assigns the AAA authentication group RADIUS to vty line.)
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
Russ SuterAuthor Commented:
That looks like a good start and something worth playing with. However, if I completely screw up the Cisco router settings is there a quick and easy way to reload the last known good configuration without having to power cycle the router?
0
 
Marius GunnerudSenior Systems EngineerCommented:
you could save the current / old configuration to flash:

copy run flash

you should then be asked to enter a file name to save the configuration under...if i remember correctly.

and then if things go bad issue the following command:

configure replace flash:<file name>

This should replace the running configuration. However I have had varied success with this as it seems on routers the configuration is only merged with the existing configuration.  I have had no issues with using this on switches.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.